Record status Published
Identifier year (not publication year) 2025
Source publication Jul 10, 2025
Source updated Aug 4, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Integer underflow during processing of short network packets in CDA FTEB responder
The Honeywell Experion PKS contains an Integer Underflow
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to
Input Data Manipulation, which could result in improper integer data value checking during subtraction leading to a denial of service.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
C300 PCNT02
Vendor Honeywell
Product C300 PCNT02
Default status unaffected
C300 PCNT02 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
C300 PCNT05
Vendor Honeywell
Product C300 PCNT05
Default status unaffected
C300 PCNT05 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
FIM4
Vendor Honeywell
Product FIM4
Default status unaffected
FIM4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
FIM8
Vendor Honeywell
Product FIM8
Default status unaffected
FIM8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
UOC
Vendor Honeywell
Product UOC
Default status unaffected
UOC · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
CN100
Vendor Honeywell
Product CN100
Default status unaffected
CN100 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
HCA
Vendor Honeywell
Product HCA
Default status unaffected
HCA · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
C300PM
Vendor Honeywell
Product C300PM
Default status unaffected
C300PM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
C200E
Vendor Honeywell
Product C200E
Default status unaffected
C200E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed